📦

no-mistakes

Name: no-mistakes
Author: kunchenguid

Révision du contenu r1 Risque moyen ⚙️ Commandes externes🌐 Accès réseau

Validate and Ship Code Changes Safely

Complex delivery pipelines can lose intent or mishandle repository state. This skill guides no-mistakes runs through review, testing, publication, and CI decisions.

Prend en charge: Claude Codex Code(CC)

⚠️ 50 Médiocre

Maintain this Skill? Claim it ⚠️ 50 Médiocre

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "no-mistakes" from https://skillstore.io/skills/kunchenguid-no-mistakes.md and its manifest at https://skillstore.io/api/skills/kunchenguid-no-mistakes/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/kunchenguid-no-mistakes.md manifest signé GET /api/skills/kunchenguid-no-mistakes/manifest lockfile signé GET /api/skills/kunchenguid-no-mistakes/lockfile

Tester

Utilisation de « no-mistakes ». Validate my committed feature and stop for product decisions.

Résultat attendu:

Validation reached review. One mechanical fix was applied. A product behavior finding needs your decision before the pipeline continues.

Utilisation de « no-mistakes ». Drive the approved pipeline until CI is ready.

Résultat attendu:

Review, tests, documentation, lint, push, and CI completed. The pull request is ready for human review and merge.

Utilisation de « no-mistakes ». Explain why the run did not publish.

Résultat attendu:

The run passed local checks but skipped publication because remote credentials were unavailable. No pull request was created.

Audit de sécurité

Risque moyen

v1 • 27/09/2026 Ouvrir le rapport versionné

All 153 static findings are false positives caused by Markdown formatting, documentation links, or unrelated prose. The skill still carries medium operational risk because it drives repository publication, accepts tool-supplied commands, and can resolve gates unattended with consent. No prompt injection or concealed malicious intent was found.

Fichiers analysés

395

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (3)

Moyen

SKILL.md:49-56 SKILL.md:139-200 SKILL.md:276-296

Repository and Remote Publication Automation

The skill directs an external pipeline that can commit, rebase, push, create pull requests, and monitor CI. These disclosed operations can materially change local and remote repository state.

The skill explicitly describes commit, rebase, push, pull request, and CI actions across these sections.

Moyen

SKILL.md:109-113 SKILL.md:262-266

Execution of Tool-Supplied Commands

The skill tells the agent to act on exact commands returned by the external no-mistakes tool. Compromised or manipulated tool output could direct unintended command execution.

The instructions explicitly require acting on returned commands, although nearby text narrows expected recovery commands and reduces exploitability.

Moyen

SKILL.md:322-331

Unattended Gate Resolution

With user consent, the --yes mode automatically fixes ask-user findings and approves resulting reviews. Broad consent can permit product behavior changes without per-finding confirmation.

The unattended behavior and its consent requirement are stated directly, including automatic handling of ask-user findings.

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/kunchenguid-no-mistakes/security.svg)](https://skillstore.io/skills/kunchenguid-no-mistakes?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/kunchenguid-no-mistakes?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kunchenguid-no-mistakes/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/kunchenguid-no-mistakes.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

kunchenguid. (2026). no-mistakes security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1

Citation BibTeX

@techreport{kunchenguid-kunchenguid-no-mistakes-2026,
  author = {kunchenguid},
  title = {no-mistakes security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "no-mistakes security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "kunchenguid"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1"
identifiers:
  - type: other
    value: "skillstore:kunchenguid-no-mistakes:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Validate a Feature

Run committed feature work through review, tests, lint, documentation, and CI before requesting merge.

Prepare a Pull Request

Coordinate push and pull request stages while preserving explicit release constraints and reporting exceptions.

Recover Pipeline Custody

Interpret branch synchronization state and recover preserved pipeline commits without improvising destructive Git operations.

Essayez ces prompts

Validate Committed Work

Run no-mistakes on my committed feature branch. Use this intent: [goal]. Ask me about every ask-user finding.

Complete and Validate a Task

Complete [task], commit only relevant changes on a feature branch, then run no-mistakes with my full original intent.

Validate with Approved Skips

Validate this branch and skip [step] as authorized. Report every skip, override, pipeline fix, and final outcome.

Drive an Unattended Run

Run the full pipeline with --yes. Preserve unrelated work, honor protected-path refusals, and stop after checks pass.

Bonnes pratiques

Provide the complete user goal, constraints, exclusions, and decisions as pipeline intent.
Inspect structured branch synchronization state before committing follow-up work or starting another run.
Report every automatic fix, skip, override, and missing validation signal.

Éviter

Do not start validation from the default branch or with uncommitted task changes.
Do not approve ask-user findings without direct consent or an explicit unattended request.
Do not reset, rebase, abort, or replace branches while the pipeline owns an active run.

Foire aux questions

What must be configured first?

Install no-mistakes, initialize the repository, run its daemon, and configure a supported pipeline agent.

Can it validate uncommitted changes?

No. The workflow validates committed history on a feature branch.

Can it push code and create pull requests?

Yes. The configured pipeline may push branches, create pull requests, and monitor CI.

How are product decisions handled?

Findings marked ask-user stop the run until the user chooses to fix, approve, or skip them.

What does --yes authorize?

It permits eligible findings to be fixed and approved without repeated questions. Protected paths still require operator action.

What happens after checks pass?

The skill reports the pull request as ready. A human reviews and merges it.

Détails du développeur

Auteur

kunchenguid

Licence

MIT

Révision Skillstore

Avis de version

L’auteur n’a déclaré aucune version.

Dépôt

https://github.com/kunchenguid/no-mistakes/tree/f7fb206c26e407d0d04564c5b91c0ac1dc233689/skills/no-mistakes

Réf

8b5ad1599e7c55e9b6c627bca3f556f6e9061cb1

Récence de maintenance

30/09/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📄 SKILL.md

no-mistakes

Installer avec mon Agent

Ressources lisibles par les agents

Tester

Audit de sécurité

Préoccupations de sécurité confirmées (3)

Facteurs de risque

Copier le lien du rapport

Badge Markdown

Badge HTML

Carte intégrable

Citation APA

Citation BibTeX

CITATION.cff

Score Skillstore

Ce que vous pouvez créer

Validate a Feature

Prepare a Pull Request

Recover Pipeline Custody

Essayez ces prompts

Bonnes pratiques

Éviter

Foire aux questions

Détails du développeur